Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/nDn1Phj6GnMK5PHV3wUAodX7Ivo.roa
File: nDn1Phj6GnMK5PHV3wUAodX7Ivo.roa (raw, json)
Hash identifier: nn8iCFJuYnrCNlKVxkz6U80+MC++A1fb4RbqIlUDvP8=
Subject key identifier: 9C:39:F5:3E:18:FA:1A:73:0A:E4:F1:D5:DF:05:00:A1:D5:FB:22:FA
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B232846D600887F575B8B7EF173A33
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/nDn1Phj6GnMK5PHV3wUAodX7Ivo.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205608
IP address blocks: 195.136.4.0/22 maxlen: 22
195.136.38.0/23 maxlen: 23
195.136.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:84:6d:60:08:87:f5:75:b8:b7:ef:17:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c39f53e18fa1a730ae4f1d5df0500a1d5fb22fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:75:97:64:12:9b:31:9f:6f:b7:7b:c6:c1:
d9:4d:16:06:b1:e1:86:3d:e9:6e:a4:17:20:cc:a4:
23:a6:a4:51:99:95:f0:01:38:fd:a4:11:16:46:f5:
fb:09:8a:f7:7c:db:b0:84:c9:68:8d:b7:0c:73:7d:
e3:2c:91:53:6f:65:d8:61:dc:6a:36:ac:79:51:03:
46:58:cd:14:9b:dd:a5:ce:03:f3:31:ea:0c:f5:f1:
23:65:d9:d8:9b:2e:1a:f4:26:04:3f:1f:fa:e3:f9:
69:f2:82:38:78:92:dd:92:6c:cd:df:b6:c0:98:cc:
ae:36:f6:15:ea:a4:97:58:ff:b1:3e:fd:c0:10:4d:
de:e5:c2:21:c3:6c:09:86:9c:e8:f0:a6:90:4a:dc:
90:f3:70:2c:27:50:0e:7a:9b:43:f9:71:3f:c5:2b:
c5:c0:06:60:d4:5d:dc:4e:09:84:76:15:3a:88:99:
e3:93:de:d8:00:1d:cf:f2:97:92:20:ff:f9:21:f2:
30:dc:62:83:c2:53:1d:6b:2d:1d:1c:a3:57:4e:f5:
b5:0d:e3:4d:0c:5a:42:c1:52:af:d3:3f:ce:35:f8:
f9:1f:16:ed:74:d2:6c:46:5c:a7:e4:02:ea:7e:1f:
d3:90:b0:cf:31:9b:0e:1d:27:87:20:57:f3:3b:70:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:39:F5:3E:18:FA:1A:73:0A:E4:F1:D5:DF:05:00:A1:D5:FB:22:FA
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/nDn1Phj6GnMK5PHV3wUAodX7Ivo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.4.0/22
195.136.38.0/23
195.136.156.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:ca:93:44:c1:b2:f3:fa:47:d8:33:c3:8b:7f:ef:58:d9:07:
b4:07:f8:24:f3:82:63:d6:bd:94:4d:67:af:c0:7b:64:9b:d6:
bd:54:9c:dc:2c:9e:75:16:e8:0f:26:17:95:c8:cc:3f:5d:d4:
34:99:43:ed:09:c0:b5:e2:e9:75:91:8e:b8:f4:25:18:47:6f:
a5:41:b3:5b:44:1b:bd:ba:d1:eb:b1:4e:6b:70:03:18:74:3c:
c9:c1:d5:79:82:22:32:b8:fa:3d:a8:24:b2:29:8b:bd:fa:00:
66:b0:f2:b8:33:30:03:c5:ff:0d:6b:bf:da:ff:5e:bf:97:a2:
b7:dc:6a:2f:2b:cd:4c:5e:cd:1a:7c:b6:ed:57:dd:5a:c1:a0:
5b:36:27:12:dc:ce:67:3b:6d:34:2f:f7:24:44:05:82:10:9b:
37:d9:dd:4d:c1:9f:31:b5:05:b1:d2:52:3b:37:da:e4:0a:4d:
66:8d:6b:5d:40:c3:fa:ac:63:5c:96:69:cf:34:3a:09:cc:9b:
63:bf:76:cc:23:13:09:30:e1:e4:c3:b9:00:c7:55:26:0f:3f:
6e:4b:d3:48:9b:59:98:18:d2:0a:36:b8:4d:68:17:d5:94:37:
cf:d9:f1:97:ff:d7:b2:d5:79:68:a6:cb:81:30:68:f3:51:f5:
3e:0e:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:34 2025 by rpki-client